Schnorr ring signature scheme with specified verifiability

Abstract

The invention discloses a Schnorr ring signature scheme with specified verifiability. The scheme comprises four stages, namely, system initialization, signature generation, signature verification and identity confirmation. An identity confirmation process of the scheme is interactive zero-knowledge proof, the identity confirmation can be finished by only twice interaction of a signer and a verification party, and identity evidences presented in the process are incommunicable. Meanwhile, the scheme is based on Schnorr ring signature, and each stage has high execution efficiency. Under a random oracle model, adaptive chosen-message attacks can be resisted, namely, unforgeability is realized.

Description

Technical field [0001] The invention relates to a digital signature technology, in particular to a Schnorr ring signature scheme with specified verifiability. Background technique [0002] More and more network applications involve the interaction of private information, and the demand for anonymous communication capabilities is increasing. Ring signature is a new type of anonymous signature technology that was proposed by Rivest et al. in 2001 under the background of "securely leaking secrets". It is a special group-oriented signature. There is no group administrator and group establishment process. The signer only needs to select a part of the member public key (used to hide the signer's identity), and then generate a signature with his own private key. This reduces a lot of complicated interactive certification process. The biggest feature of ring signature is that the signer has unconditional anonymity. Even if the attacker has unlimited computing power, he cannot track the...

AI Technical Summary

Problems solved by technology

In view of this problem, earlier research works include: a verifiable ring signature scheme based on double discrete logarithms proposed by Lv et al. in 2003, but the signature complexity is too high

In 2004, GAN et al. embedded authentication information in the off-valve channel, and also realized the verifiability of the ring signature, but the implementation cost is high

[0004] In recent years, deniable ring signatures (Komanoetal, 2006), Step-Out ring signatures (Klonowski etal, 2008), and extended RST ring signatures (Dongetal, 2012) have been proposed successively, but they all have complicated interaction processes and complex implementations. , the problem of inefficiency

Images